[*] Binary protection state of mosquitto_passwd
Full RELRO Canary found NX enabled PIE enabled No RPATH No RUNPATH No Symbols
[*] Function printf tear down of mosquitto_passwd
add.w r0, sp, 0x1fe00
ldr.w fp, [0x000026b0]
ldr r3, [r1, r3]
movw r4, 0xffdc
add.w r0, r0, 0x1c4
ldr.w r8, [0x000026b4]
add fp, pc
add.w sb, sp, 0xc
ldr r3, [r3]
str r3, [r0]
mov.w r3, 0
add.w r3, sp, 0x1fe00
add.w r3, r3, 0x1f0
mov r1, fp
ldr r3, [r3]
movs r0, 1
add r8, pc
cmp r4, r3
it hs
movhs r4, r3
blx sym.imp.__printf_chk
ldr r3, [0x000026b8]
ldr.w r3, [r8, r3]
--
add.w r3, r3, 0x1c4
add r1, pc
ldr r2, [r1, r2]
ldr r1, [r2]
ldr r2, [r3]
eors r1, r2
mov.w r2, 0
bne 0x26a2
mov r0, sl
add.w sp, sp, 0x1fe00
add sp, 0x1cc
pop.w {r4, r5, r6, r7, r8, sb, sl, fp, pc}
mov sl, r0
movs r0, 0xa
blx sym.imp.putchar
cbz r5, 0x266c
mov r2, r5
mov r1, fp
movs r0, 1
add.w r5, sp, 0xff00
blx sym.imp.__printf_chk
ldr r3, [sp, 4]
adds r5, 0xe8
--
mov.w r3, 0
bne 0x2796
mov r1, r4
mov r0, r6
add sp, 0x60
pop.w {r4, r5, r6, lr}
b.w 0x136c
mov r1, sp
blx 0x15a0
cmp r0, 0
blt 0x2792
ldr r3, [sp, 0x10]
and r3, r3, 0xd000
cmp.w r3, 0x8000
beq 0x2718
ldr r2, [0x000027ac]
mov r3, r6
movs r1, 8
movs r0, 0
add r2, pc
bl sym.log__printf
movs r4, 0
b 0x2732
--
cmp r0, 0
beq 0x282e
mov r0, r8
pop.w {r4, r5, r6, r7, r8, pc}
mov.w r8, 0
mov r0, r8
pop.w {r4, r5, r6, r7, r8, pc}
nop
push.w {r4, r5, r6, r7, r8, sb, lr}
mov r6, r2
ldr r2, [0x00002950]
sub sp, 0xc
mov r7, r1
mov r4, r0
ldr r3, [0x00002954]
add r2, pc
ldr r3, [r2, r3]
ldr r3, [r3]
str r3, [sp, 4]
mov.w r3, 0
blx sym.imp.__snprintf_chk
blx sym.imp.umask
mov.w r1, 0x100
--
strb r3, [r5, r2]
blx 0x14f0
b 0x28e8
mov r0, r7
blx 0x14f0
b 0x28e8
blx 0x14d8
asrs r4, r5, 0x18
movs r1, r0
lsls r0, r4, 4
movs r0, r0
asrs r0, r3, 0x17
movs r1, r0
push.w {r3, r4, r5, r6, r7, r8, sb, lr}
mov r7, r1
mov r8, r2
mov sb, r0
movs r4, 1
blx sym.imp.unlink
mov r6, r0
blx sym.imp.__snprintf_chk
blx sym.imp.umask
cbz r0, 0x29bc
[*] Function printf used 5 times mosquitto_passwd
